httpclient

type Config ¶

type Config struct {
	// A nil Transport, including a typed nil, uses http.DefaultTransport.
	HTTPClient *http.Client
	BaseURL    string
	// RejectRedirects binds resource-scoped requests to the original URL, even
	// when a same-origin server redirects to a different tenant or resource.
	RejectRedirects bool
}

type DeliveryConfig ¶ added in v0.62.0

type DeliveryConfig struct {
	HTTPClient *http.Client
	// Destination authorizes every request and every redirect.
	Destination Destination
	// CredentialOrigin is the one origin that may still receive credentials,
	// such as an API that serves its own files; the zero value strips them
	// from every request.
	CredentialOrigin Origin
	// CredentialHeaders names provider credentials removed alongside
	// Authorization, Proxy-Authorization, and Cookie.
	CredentialHeaders []string
}

DeliveryConfig restricts a client that follows provider-issued output URLs. Such a URL is data, not a grant of the host's network or credentials.

type Destination ¶ added in v0.62.0

type Destination interface {
	ValidateRequest(request *http.Request) error
}

Destination authorizes the target of one request, including the authority written to the wire. Origins is the fixed-set Destination; a provider whose output hosts follow a rule supplies its own.

type Origin ¶

type Origin struct {
	// contains filtered or unexported fields
}

Origin is an immutable HTTP origin. Only hierarchical URLs are admitted, so Opaque cannot replace the checked authority on the wire. Equality includes the scheme, host, and effective port; its zero value authorizes no requests.

func NewOrigin(endpoint *url.URL) (Origin, error)

func ParseOrigin(raw string) (Origin, error)

func (o Origin) ValidateRequest(request *http.Request) error

type Origins ¶ added in v0.62.0

type Origins []Origin

Origins is a set of authorized origins. A request is authorized when its destination, including the authority written to the wire, is one of them.

func (o Origins) ValidateRequest(request *http.Request) error

type ResponseBodyLimit ¶ added in v0.61.0

type ResponseBodyLimit int64

ResponseBodyLimit admits bytes as they are read, before a decoder can allocate for an untrusted response. The HTTP client still owns retries and body closure.

func (r ResponseBodyLimit) Apply(request *http.Request, next func(*http.Request) (*http.Response, error)) (*http.Response, error)

func (r ResponseBodyLimit) ApplyErrors(request *http.Request, next func(*http.Request) (*http.Response, error)) (*http.Response, error)

func (r ResponseBodyLimit) ApplyEventStream(request *http.Request, next func(*http.Request) (*http.Response, error)) (*http.Response, error)

type ResponseBudget ¶ added in v0.62.0

type ResponseBudget struct {
	// contains filtered or unexported fields
}

ResponseBudget is one aggregate byte grant shared by every response of an operation, such as the pages of a listing, so a scan that follows a server's pagination cannot read more in total than its caller granted. Each body is read in full against what remains; a successful body must be one JSON value. It is not safe for concurrent use.

func NewResponseBudget(maxBytes int64) (*ResponseBudget, error)

func (r *ResponseBudget) Apply(request *http.Request, next func(*http.Request) (*http.Response, error)) (*http.Response, error)

type ResponseError ¶ added in v0.60.0

type ResponseError struct {
	// contains filtered or unexported fields
}

ResponseError exposes transport evidence without turning a remote response body into public diagnostics. It makes no claim about provider execution.

func NewResponseError(statusCode int, header http.Header) *ResponseError

func (r *ResponseError) Error() string

func (r *ResponseError) HTTPStatus() int

func (r *ResponseError) RequestID() string